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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . |EI This communication is responsive to amendment filed November 28, 2007. 

2. ^ The allowed claim(s) is/are 1,3-10 and 31 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . ^ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. ^ Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 
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DETAILED ACTION 

1 . Claims 1 , 3-1 0, and 31 are pending in this office action, claims 2, 1 1 -30, 32, and 
33 are canceled based on an examiners amendment. 

Allowable Subject Matter 

2. Claims 1 , 3-1 0, and 31 are allowed. 

3. The following is an examiner's statement of reasons for allowance: the prior art of 
record fails to teach creating a SSL connection, without using certificates, and then 
increasing security by using certificate-based authentication without breaking the 
already established SSL connection. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. U.S. Patent Publication Number 2002/0029350, to Cooper et al., 
teaches at figure 5 and paragraph 0222, that the user logs on (does not specify if an 
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SSL connection was made) and subsequently authenticates the digital certificate of the 
user. 

5. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Gary Hamilton (U.S. Reg. No. 31,834) on February 22, 2008. 
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1 . (Currently amended) A method for performing authentication operations, the 
method comprising: 

performing a non-certificate-based authentication operation through an SSL 
(Secure Sockets Layer) session between a server and a client; and 

subsequent to performing the non-certificate-based authentication operation, 
performing a certificate-based authentication operation through the SSL session 
between the server and the client without exiting or renegotiating the SSL session prior 
to completion of the certificate-based authentication operation, 

wherein the non-certificate-based authentication operation through the SSL 
session uses a first digital certificate from the client, wherein the certificate- 
based authentication operation uses a second digital certificate from the client, 
and wherein the first digital certificate and the second digital certificate are not 
identical. 

2. (Canceled). 
11-30. (Canceled). 

31 . (Currently amended) A method for performing authentication operations, the 
method comprising: 

receiving at a server a first resource request from a client; 

in response to determining that the first resource request requires completion of 
a non-certificate-based authentication operation prior to responding to the first resource 



Application/Control Number: 10/621,927 Page 5 

Art Unit: 2136 

request, establishing an SSL (Secure Sockets Layer) session between the server and 
the client; 

performing a non-certificate-based authentication operation through the SSL 
session; 

in response to successfully performing the non-certificate-based authentication 
operation, sending a first resource response from the server to the client; 

receiving at the server a second resource request from the client through the 
SSL session subsequent to performing the non-certificate-based authentication 
operation; 

in response to determining that the second resource request requires a 
certificate-based authentication procedure, downloading an executable module to the 
client from the server through the SSL session; 

receiving at the server through the SSL session a digital signature that has been 
generated by the executable module using a digital certificate at the client; and 

in response to successfully verifying the digital signature at the server, sending a 
second resource response from the server to the client, 

wherein establishing the SSL session uses a first digital certificate from the 
client, wherein the certificate-based authentication operation uses a second 
digital certificate from the client, and wherein the first digital certificate and the 
second digital certificate are not identical. 



32-33. (Canceled). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRANDON S. HOFFMAN whose telephone number is 
(571)272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Brandon S Hoffman/ 
Examiner, Art Unit 2136 



/Nasser G Moazzami/ 

Supervisory Patent Examiner, Art Unit 2136 



